Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

By running wireshark in 14.04 I got this error What should I do to solve this?

Lua: Error during loading: [string "/usr/share/wireshark/init.lua"]:46: dofile has been disabled due to running Wireshark as superuser. See for help in running Wireshark as an unprivileged user.

share|improve this question
up vote 2 down vote accepted

That is because (I presume) you are running wireshark as root

From the link you were given in the message:

You need to run Wireshark or TShark on an account with sufficient privileges to capture, or need to give the account on which you're running Wireshark or TShark sufficient privileges to capture. The way this is done differs from operating system to operating system.

To be secure (at least in a way), it is recommended that even an administrator should always run in an account with (limited) user privileges, and only start processes that really need the administrator privileges. The Security page provides explanations why this is a good idea.

Setting network privileges for dumpcap

  1. Ensure your linux kernel and filesystem supports File Capabilities and also you have installed necessary tools.

  2. "setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap"

  3. Start Wireshark as non-root and ensure you see the list of interfaces and can do live capture.

so ...

sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap

Then run wireshark as a non-root user.

share|improve this answer
Yes, I run that with sudo. – lion Apr 24 '14 at 20:15
I wrote this : sudo "setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap" and I got this : sudo: setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap: command not found – lion Apr 25 '14 at 19:35
try sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap – bodhi.zazen Apr 25 '14 at 19:40
There is some documentation in the folder: /usr/share/doc/wireshark-common/ in a readme file. It goes on about some other non-root options, and dependencies for other tasks you may wish to complete. – j0h May 9 '15 at 3:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.